EXP-301: Windows User Mode Exploit Development

Topics covered in the Windows User Mode Exploit Development course (EXP-301)

• WinDbg Tutorial

  Master the powerful WinDbg debugger to effectively analyze crashes, investigate memory dumps, and identify vulnerabilities in Windows applications.

• Stack Buffer Overflows

  Understand the mechanics of stack buffer overflows and learn how to exploit them to gain control of vulnerable programs.

• Exploiting SEH Overflows

  Delve into Structured Exception Handler (SEH) overflows, a specific type of buffer overflow, and master techniques to leverage them for code execution.

• Intro to IDA Pro

  Familiarize yourself with IDA Pro, a leading disassembler and debugger, essential for reverse engineering software binaries and uncovering vulnerabilities.

• Overcoming Space Restrictions

  Egghunters: Learn how to bypass space limitations in your exploit payloads by utilizing egghunter techniques to locate and execute shellcode.

• Shellcode From Scratch

  Develop the skills to write your own custom shellcode, enabling you to perform specific actions on compromised systems.

• Reverse-Engineering Bugs

  Learn how to systematically analyze software binaries to identify and understand vulnerabilities that can be exploited.

• Stack Overflows and DEP/ASLR Bypass

  Master advanced techniques for exploiting stack overflows while bypassing modern security mitigations such as Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR).

• Format String Specifier Attacks

  Understand and exploit format string vulnerabilities, which can be leveraged to read or write arbitrary memory locations.

• Custom ROP Chains and ROP Payload Decoders

  Learn how to construct custom Return-Oriented Programming (ROP) chains to bypass security defenses and build ROP payload decoders for stealthy exploitation.